032e2dbe5a092a39e7abfb00615c6b99 | Triage

Sharing

General

Target

032e2dbe5a092a39e7abfb00615c6b99
Size

237KB
MD5

032e2dbe5a092a39e7abfb00615c6b99
SHA1

db29fd0aa760de636f1909ee9473cd6bf1dbcb82
SHA256

6754fea5a729454f06159df8d5286ca0181b50cf89bd20aa52225867f8ebb6c6
SHA512

f7453e63a86a869b36afd82a67894541bde128596bca4103a9f4c695ea04a03e62d4d9625284f9b961d1185a919235dc0bd8a630c69aea5a006984c51ff8369f
SSDEEP

6144:tzHnq+tAqAfTVfsxM4H7KhO+Cfpwpd8ZGrHc7s:RK+V+KZ7EudZGrHcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
032e2dbe5a092a39e7abfb00615c6b99

Files

032e2dbe5a092a39e7abfb00615c6b99
.exe windows:4 windows x86 arch:x86

15cf8a086ee3fdad993a4286d92c733d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
GetLastError
GetTempPathA
Sleep

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 234KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE